Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E-6Zo-x495GWMBDgQ0xNhQqDTRE.roa
File:                     E-6Zo-x495GWMBDgQ0xNhQqDTRE.roa (raw, json)
Hash identifier:          G2H27KKSiKgGDl9Klal+popF/uBNH2bo6K0uCSx3PQo=
Subject key identifier:   13:EE:99:A3:EC:78:F7:91:96:30:10:E0:43:4C:4D:85:0A:83:4D:11
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       0188BDCC082F2F779BED4F0532659BAA29DA
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E-6Zo-x495GWMBDgQ0xNhQqDTRE.roa
Signing time:             Thu 15 Jun 2023 06:44:05 +0000
ROA not before:           Thu 15 Jun 2023 06:44:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212609
IP address blocks:        85.237.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bd:cc:08:2f:2f:77:9b:ed:4f:05:32:65:9b:aa:29:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jun 15 06:44:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13ee99a3ec78f791963010e0434c4d850a834d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:5f:6e:4b:e4:4f:4e:6e:b6:3e:aa:43:cd:
                    7c:95:e0:21:38:fc:a8:62:01:af:30:89:1c:33:0b:
                    bb:1e:ee:02:f3:d0:40:6f:64:33:9b:b4:93:8c:fe:
                    00:df:9f:b5:10:2c:3f:bc:1c:0f:66:0d:0b:cb:da:
                    b4:9b:c0:43:ec:d0:94:2a:f7:1f:00:cd:dc:0c:c3:
                    d2:0e:4f:a9:f9:60:1b:30:51:f7:2e:8b:74:d0:aa:
                    dd:10:df:d3:47:d9:10:23:65:ad:cf:7d:ae:78:9b:
                    8b:8a:5d:f2:10:ee:cf:b7:aa:39:c4:37:9a:20:7d:
                    02:f0:5c:0c:83:5e:15:ff:a2:d1:ee:dd:fe:76:db:
                    f2:57:6e:99:aa:2a:fc:02:81:eb:9a:d8:e0:45:5e:
                    a9:67:cc:59:66:f2:6b:5a:ca:ad:d1:b1:31:2e:9b:
                    b2:69:cb:98:b9:21:e9:44:d6:6b:da:aa:e9:74:eb:
                    8f:bf:a8:07:c3:95:5e:b4:7a:17:a6:b9:5b:4b:13:
                    b5:6c:a9:e8:17:68:31:94:1d:3f:1a:87:03:0b:98:
                    ef:7b:8e:92:a1:d6:fd:13:41:12:d2:0b:5e:65:10:
                    0a:8b:9f:a7:fd:ec:34:cd:95:61:dd:e9:12:57:42:
                    82:16:7a:7c:55:f4:cf:97:d6:00:d0:e2:db:b8:f5:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:99:A3:EC:78:F7:91:96:30:10:E0:43:4C:4D:85:0A:83:4D:11
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E-6Zo-x495GWMBDgQ0xNhQqDTRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:42:69:13:d0:70:f5:15:6a:f2:68:77:00:40:eb:8c:ec:
         e0:19:2b:33:6b:63:7d:4c:1d:0f:b9:e6:e8:c3:70:ab:11:8f:
         27:ea:2f:2f:ee:14:15:1a:98:88:b7:fd:82:b5:a0:f5:98:01:
         4c:5d:97:77:7a:65:2a:4f:4a:78:12:95:38:72:6b:97:be:1d:
         85:bf:41:bc:95:ff:ef:5a:d4:1f:c2:64:2b:fc:3a:bf:92:a3:
         49:32:0b:9e:68:4b:09:1a:b0:08:24:53:2b:43:53:34:a2:ae:
         62:ae:2d:1c:6c:78:fd:91:58:8d:cc:43:af:a0:47:30:00:56:
         03:31:2d:13:40:71:69:0a:74:1c:f8:68:0a:89:21:7e:4c:66:
         0f:5d:f4:95:08:9a:22:f2:f0:70:36:42:05:05:52:fc:1a:a5:
         aa:f4:0f:82:7c:7b:f8:80:6e:b8:0e:be:46:b2:eb:da:1f:a7:
         cc:32:e9:99:ac:52:d4:31:63:66:ed:c8:37:d4:4b:53:36:92:
         2e:3d:5f:bd:dc:a3:16:3d:3d:91:a9:3e:ad:f3:19:10:4e:d8:
         19:e5:df:d7:0c:72:40:a4:8a:6d:11:51:da:2f:30:e2:15:c7:
         19:f8:77:4e:b2:f0:de:ff:b6:29:7b:a2:ce:6a:5a:fb:be:74:
         0c:03:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org